Patent EA-004262-B1 (EA)
Title: Apparatus and method for biometrics-based authentication
Inventor: POO TENG PIN
IPC: G06F21/34
Filed: 2002-03-22
Abstract: 1. A portable memory device comprising: a microprocessor; a non-volatile memory coupled to the microprocessor and having at least 8 Mb memory capacitor; and a biometrics-based authentication module coupled to and controlled by the microprocessor, wherein access to the non-volatile memory is granted to a user provided that the biometrics-based authentication module authenticates the user's identity and wherein access to the non-volatile memory is denied to the user otherwise and an integrated pin connector for direct connection of the portable memory device to the main platform, having a controller, and for data exchange between the main platform and the non-volatile memory at authentication of the user's identity. 2. The portable device according to Claim 1, wherein the biometrics-based authentication module is a fingerprint authentication module. 3. The portable device according to claim 2, wherein the fingerprint authentication module comprises a fingerprint sensor element. 4. The portable device according to claim 3 in which the sensor element is rotatable during a sensing operation, to bring successive portions of a user's finger into rolling contact with the sensor, and thereby sense successive portions of a user's fingerprint. 5. The portable device according to claim 3 or claim 4, wherein the fingerprint authentication module comprises a cover mounted for motion between a first position covering the sensor element and a second position revealing the sensor element. 6. The portable device according to any of the preceding claims, further comprising a universal serial bus (USB) connector for coupling with another USB compliant device. 7. The portable device according to any of the preceding claims, wherein the biometrics-based authentication module comprises a biometrics sensor fitted on one surface of the portable device. 8. The portable device according to any of the preceding claims, wherein the non-volatile memory comprises flash memory. 9. The portable device according to any of the preceding claims, wherein the microprocessor is configured to provide a bypass mechanism for authentication upon a determination of authentication failure by the biometrics-based authentication module. 10. A portable device comprising: a bus; a microprocessor coupled to the bus; a non-volatile memory coupled to the bus; and a biometrics-based authentication module coupled to the bus, wherein under the control of the microprocessor the biometrics-based authentication module is configured to (1) capture a first biometrics marker; (2) store the first biometrics marker in the non-volatile memory; (3) capture a second biometrics marker; and (4) determine whether the second biometrics marker can be authenticated against the first biometrics marker and an integrated pin connector for direct connection of the portable memory device to the main platform, having a controller, and for data exchange between the main platform and the non-volatile memory when it is determined that the second biometrics marker can be authenticated against the first biometrics marker. 11. The portable device according to Claim 10, wherein the biometrics-based authentication module is a fingerprint authentication module. 12. The portable device according to claim 10 or claim 11, further comprising a universal serial bus (USB) device controller coupled to the bus and A-USB connector coupled to the bus, such that the portable device is capable of communicating with a host platform via the USB connector. 13. The portable device according to any of claims 10 to 12, wherein the biometrics-based authentication module is structurally integrated with the portable device in a unitary construction and comprises a biometrics sensor being disposed on one surface of the portable device. 14. The portable device according to claim 13 in which the sensor is a fingerprint sensor and includes a element which is rotatable during a sensing operation, to bring successive portions of a user's finger into rolling contact with the sensor, and thereby sense successive portions of a user's fingerprint. 15. The portable device according to claim 13 or claim 14, wherein the biometrics-based authentication module comprises a cover mounted for motion between a first position covering the element and a second position revealing the sensor. 16. The portable device according to any of claims 10 to 15, wherein the non-volatile memory comprises flash memory. 17. The portable device according to any of claims 10 to 16, wherein the biometrics-based authentication module is further configured to encrypt the first biometrics marker before storing the first biometrics marker in the nonvolatile memory. 18. The portable device according to any of claims 10 to 17, wherein the microprocessor is configured to direct the biometrics-based authentication module to capture and store the first biometrics marker provided that no biometrics marker has been stored in the non-volatile memory. 19. The portable device according to any of claims 10 to 18, wherein the microprocessor is configured to enable access to the non-volatile memory upon a determination of authentication success by the biometrics-based authentication module. 20. The portable device according to any of claims 10 to 19, wherein the microprocessor is configured to disable access to the non-volatile memory upon a determination of authentication failure by the biometrics-based authentication module. 21. The portable device according to any of claims 10 to 20, wherein the microprocessor is configured to provide a bypass mechanism for authentication upon a determination of authentication failure by the biometrics-based authentication module. 22. A biometrics-based authentication method implemented using a portable device, the method comprising the steps of: (a) obtaining a first biometrics marker from a user with a biometrics sensor installed on the portable memory device; (b) retrieving a registered biometrics marker from a memory of the portable device, the registered biometrics marker having been stored therein during a registration process; (c) comparing the first biometrics marker against the registered biometrics marker; and (d) granting an access to the portable memory device signaling an authentication success provided that a match is identified in said step (c) and after that exchange of data occurs between the portable memory device and the controller of the main platform via the pin connector integrated with the portable memory device. 23. The biometrics-based authentication method as recited in Claim 22 wherein the registered biometrics marker is a fingerprint. 24. The biometrics-based authentication method according to claim 22 or claim 23, wherein the registered biometrics marker is stored in an encrypted format. 25. The biometrics-based authentication method according to any of claims 22 to 24, wherein said step (d) comprises granting the user access to the non-volatile memory. 26. The biometrics-based authentication method according to any of claims 22 to 25, further comprising the step of denying the user access to the nonvolatile memory provided that a match is not identified in said step (c). 27. The biometrics-based authentication method according to any of claims 22 to 26, further comprising the step of providing the user with a bypass authentication procedure provided that a match is not identified in said step (c).